rails-mcp-server

The server uses `eval` in the `get_schema` analyzer on introspection results from ActiveRecord, which carries inherent risks if the Rails project or its ActiveRecord extensions are compromised. It also executes direct shell commands (`git ls-files`, `bin/rails runner`) via `Open3.capture3` and backticks. While `execute_ruby` employs extensive sandboxing to restrict file I/O, network, and system calls, this sandboxing does not apply to other analyzers, leaving potential attack vectors. Operating in HTTP mode with `--bind-all` increases the network attack surface, although built-in security features are claimed. The security relies heavily on the trustworthiness of the target Rails project being analyzed.